[LIVY-553] Add JWT Authorization

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.6.0
• Fix Version/s: 0.9.0
• Component/s: Server
• Assignee: Unassigned
• Reporter: Zach York
• Created: 28/Jan/19 21:40
• Updated: 12/Nov/22 22:29

Description

This change is to add authorization to the Livy to validate that the subject of the JWT matches the session owner or allowed users before doing any session operations. This is contributed in conjunction with [1].

[1] https://issues.apache.org/jira/browse/LIVY-552

I will put up a patch for this after LIVY-552 has been merged as it depends on some shared code.